Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
File: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft (raw, json)
Hash identifier: IN1MA7S0n4gWaaVegPEE0AoGWFF4YdwIo4sgs91oIBM=
Subject key identifier: 42:3E:AD:BA:3F:5F:76:E3:E7:74:42:29:6B:F9:8B:A2:51:80:70:20
Authority key identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
Certificate issuer: /CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Certificate serial: 019D2771BE6949536D7CF6AAD647F7894245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
Manifest number: 0C5E
Signing time: Thu 26 Mar 2026 00:00:58 +0000
Manifest this update: Thu 26 Mar 2026 00:00:58 +0000
Manifest next update: Fri 27 Mar 2026 00:00:58 +0000
Files and hashes: 1: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl (hash: coND/FgUmjxaRSb4m8WEUIj8QfTam/d7DIohYXlB2Is=)
2: sd3Ti-PexTeIfKSIlFVsahi831g.roa (hash: bnhb+UkUn0OUvRl5Jv3gihCvYD+cOKAgFSe/iwbzctY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:be:69:49:53:6d:7c:f6:aa:d6:47:f7:89:42:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Validity
Not Before: Mar 26 00:00:58 2026 GMT
Not After : Mar 27 00:00:58 2026 GMT
Subject: CN=423eadba3f5f76e3e77442296bf98ba251807020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d3:eb:32:e1:e7:35:54:5d:bb:cd:34:3d:92:
e2:a0:cc:f7:a7:11:17:bb:20:f3:5e:59:40:e0:3f:
30:d5:dc:69:fd:95:1b:46:19:cf:49:2f:f7:21:88:
fc:3b:46:9a:79:ab:bc:11:18:ad:86:31:e2:90:2b:
54:b0:40:0a:16:ab:f2:31:ad:cf:b2:eb:04:14:bc:
b6:5a:14:36:96:2d:c0:d5:43:ef:a4:72:1c:bd:d8:
ea:7a:88:6b:8c:1e:13:0a:24:06:c2:26:08:50:70:
0e:e0:cb:17:9f:e5:9c:44:0d:30:0a:e7:82:74:c1:
70:96:06:c9:b3:0a:09:80:9c:e2:bb:29:ec:e6:3d:
0e:29:9c:8a:5a:ec:35:9a:fe:6c:10:bd:3d:66:8f:
f2:ee:02:79:4e:7d:42:8e:68:d3:b3:31:5f:e9:14:
8e:8d:71:07:3c:6d:62:38:73:37:f8:04:6c:d4:c4:
82:f0:61:41:5a:b9:60:2f:5e:b7:f6:6d:f2:51:da:
8e:6c:c6:cf:8c:36:f4:74:c4:b6:0e:f8:17:64:a1:
85:6a:28:84:3a:85:35:f8:86:62:b6:fa:77:f0:aa:
6a:ba:dd:16:6e:b9:32:36:db:a9:51:ce:78:f8:87:
01:e9:0c:a2:41:21:3d:e1:f3:5d:4e:bf:b6:83:ba:
6b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3E:AD:BA:3F:5F:76:E3:E7:74:42:29:6B:F9:8B:A2:51:80:70:20
X509v3 Authority Key Identifier:
keyid:D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:06:80:9c:5d:31:88:d1:f7:47:8e:48:c0:13:c8:fe:cb:6d:
2d:fb:a5:49:3c:94:34:98:f5:c7:77:8b:c3:01:45:8b:46:8c:
65:b9:50:6c:90:33:f4:e8:90:4e:ce:ea:68:1f:bf:49:63:15:
a8:96:46:a6:f2:0e:82:30:10:db:d3:e1:0e:33:01:e9:4d:34:
c4:02:56:50:9e:e9:97:93:e6:30:20:28:32:2f:da:ea:5f:c3:
f8:01:57:05:b8:47:b0:05:af:bf:92:3a:39:fd:20:cc:48:e4:
d1:8c:fd:c6:e8:69:8f:e2:c8:fd:ab:22:9e:b7:b5:5c:15:3e:
bf:d1:72:04:ca:d7:d2:2c:87:ef:08:8c:1e:2b:d6:4a:6c:13:
8c:5a:c6:24:94:e7:7b:42:74:a5:3a:f4:38:c1:11:f0:9b:76:
2c:a8:51:44:55:b2:2c:f1:38:dd:64:19:d9:08:1d:a3:8b:fa:
01:96:ce:7c:d0:36:57:fd:d4:e3:90:40:21:02:f7:d2:fa:f3:
8a:d6:ce:13:2b:8d:84:90:bb:a2:27:1f:7e:a9:21:40:2c:aa:
4f:be:b6:5d:cd:60:83:ed:fd:7f:a0:a1:03:50:f4:ef:50:26:
80:af:9e:f9:68:f4:8e:a7:0d:98:92:69:8e:51:da:7a:db:97:
5f:c8:2d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:03 2026 by rpki-client